UTM (Formerly ASG) Feature Requests
Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!
-
Add support for Belkin F5U250 ExpressCard for laptop use.
The Belkin F5U250 uses a Marvell Yukon Chipset and is recognized during the install process of Sophos but after the UTM boots and you log into the GUI page you don’t have an option to select the card. Only the internal network card on the laptop shows up as an option.
1 vote -
Hotspot API for selling Hotspot tickets from electronic point of sale
There should be an api to generate hotspot tickets from an electronic point of sale.
3 votes -
Enterprise console to show scanning status on endpoint computers
Customer wants enterprise console to show that the scanning is happening on the endpoint machine.
For example if a customer forces a scan on the endpoint he wants to know if it is successfully running the scan, if its failing to run the scan
2 votes -
1 vote
-
Networking: Integrated inventory manager
Add a network inventory server like LanSweeper or SpiceWorks to the UTM. It would add great value to the product.
3 votes -
Logging: Include Generic Proxy activity in Firewall Log
I have found out that packets forwarded by the Generic Proxy is not shown in the live log.
When i use the firewall live log I want to see ALL packets passing the firewall, regardless of direction or anything else.10 votes -
Packet Filter: Disable logging for multiple (or all) rules
It would be very nice, if there were a checkbox-action like "Disable Logging" for selected firewall rules.Everyone who have 100 rules or more knows what I mean.
31 votesWas misread. We will look to enhance the actions of the multi-action feature for packet filter rules to enable/disable logging.
-
Wireless Protection: QR Code Vouchers for Hotspot
In addition to passwords for entry via the wireless captive portal, it will help us if QR Codes can be printed on vouchers too.
Users with smartphones are able to scan the QR code with the mobile phone, which contains an individual URL to activate the session, equivalent to typing in the vouchers passcode in the captive portal.20 votesGreat idea, we’ll have a look at this.
-
Web Protection: Exceptions for Unscannable/Encrypted Files
At the moment the astaro can only allow or block unscannable and encrypted files globally. Please provide a possibility to set this up for certain domains.
3 votes -
Allow Admins to categorize web sites instead of just whitelisting them
Allow admins to add a website to a category instead of just white listing or allowing the site. THis would allow those categories to be used in additional rules instead of added manually to each content rule
2 votes -
UTM Endpoint Protection: Require client for connectivity
On some (well, one I'm aware of) competing security platforms, if a client device attempts to connect through the perimeter security device, and does not have the vendor's endpoint security client installed, the client is either forced to install the endpoint client or it is pushed automatically -- this would help with deployment and enforcement of security for local networks.
2 votes -
the ability to allow Youtube for Schools on a per user or per group basis.
per case 372759
Sophos Product Information
Sophos Product: Sophos WS1100 Content Filter
Version in Production: 3.7.8.1Feature Request Summary
Customer notes that Youtube for Schools is a Global Policy. However, customer would prefer the ability to allow Youtube for Schools on a per user or per group basis.
How will this new feature address your business requirements?: Allow selected groups to enforce YoutubeEDU restrictions. For example, students could be enforced to YoutubeEDU, while staff could have greater access.How would you rate the importance of this feature?; 1 = Critical, 5 = Nice-to-have: 1 - Critical -- Without this feature…
1 vote -
Networking: USB 3.0 Network Adapter Support
USB 3.0 LAN adapters are fast 1000 Mb/s and it would be nice if the drivers was added to the kernel.
Special thoose with Asix chips, they are all over!AX88179
http://www.asix.com.tw/products.php?op=pItemdetail&PItemID=131;71;1123 votes -
Html5 VPN RDP resolution increase/scaling
Please consider adding any size features to the RDP sessions through html5 vpn. The current window size can render the entire feature unusable for clients unable to operate in the 1012x700 (?) resolution.
6 votes -
Enhancement request for Clipboard dialog in menu
We have a request from a large customer to enhance the clipboard dialog in the menu.
It is very clumsy to work with the dialog as some usual feature are missing. Please addButton 'Select all' - like CTRL+A in about every Windows application
Button 'Copy content' - (or better copy this every time automatically if the clip-board will be shown) - like CTRL+C
Button 'Delete content' - like CTRL-X
Button 'Show All' - like a Form maximize button to resize the dialog to show all content
Currently there is just a 'Send to Server'-button but no functions to copy,…1 vote -
2 votes
-
Dyn-compliant Endpoint Updates for HE Tunnelbroker
For anyone who is using HE tunnelbroker, if you do not have a static ipv4 address, the tunnel will break if you get a new address. To work around this, HE copied the idea of dyn by creating a website that you can pass your username, password and tunnel address to update the tunnel. It's intentionally very similar to dyn, but unfortunately, the dyn update in utm seems to be hard coded.
Here is the format: https://<USERNAME>:<PASSWORD>@ipv4.tunnelbroker.net/nic/update?hostname=<TUNNEL_ID>
It would be a useful feature for utm to be able call this similarly to the way tui calls dyn for the…
3 votes -
Mail Security: group recipients by mail adress
Within the Top10 Recipient list of the daily excecutive report, each different header adress is seperated. For example, "user.name@domain.com" is treated as different account than "User Name <user.name@domain.com". That makes it unnecessarily hard to manually calculate the total amount of emails received by one user on one day.
My suggestion is to count every single mail to a unique adress, regardless of the header. In my aforementioned example the adress user.name@domain.com would have the amount of 2 emails, instead of 1 for each different header.2 votes -
3 votes
-
Option to directly enable new rules
Give a checkbox to directly enable new rules
3 votes
- Don't see your idea?